Function revokeGrantByOperationId

packages/billing/src/grant-credits.ts:356–427

(params: {
  operationId: string
  reason: string
  logger: Logger
})

 * @returns true if the grant was found and revoked, false otherwise
 */
export async function revokeGrantByOperationId(params: {
  operationId: string
  reason: string
  logger: Logger
}): Promise<boolean> {
  const { operationId, reason, logger } = params

  // First, look up the grant to get the user_id for the advisory lock
  const grant = await db.query.creditLedger.findFirst({
    where: eq(schema.creditLedger.operation_id, operationId),
  })

  if (!grant) {
    logger.warn({ operationId }, 'Attempted to revoke non-existent grant')
    return false
  }

  // Determine lock key based on whether this is a user or org grant
  const lockKey = grant.org_id ? `org:${grant.org_id}` : `user:${grant.user_id}`

  const { result } = await withAdvisoryLockTransaction({
    callback: async (tx) => {
      // Re-fetch within transaction to get current state
      const currentGrant = await tx.query.creditLedger.findFirst({
        where: eq(schema.creditLedger.operation_id, operationId),
      })

      if (!currentGrant) {
        logger.warn(
          { operationId },
          'Grant no longer exists after acquiring lock',
        )
        return false
      }

      if (currentGrant.balance < 0) {
        logger.warn(
          { operationId, currentBalance: currentGrant.balance },
          'Cannot revoke grant with negative balance - user has already spent these credits',
        )
        return false
      }

      await tx
        .update(schema.creditLedger)
        .set({
          principal: 0,
          balance: 0,
          description: `${currentGrant.description} (Revoked: ${reason})`,
        })
        .where(eq(schema.creditLedger.operation_id, operationId))

      logger.info(
        {
          operationId,
          userId: currentGrant.user_id,
          orgId: currentGrant.org_id,
          revokedAmount: currentGrant.balance,